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TARGETED DATA PROTECTION 

BACKGROUND OF THE INVENTION 
The present invention pertains to error detection and correction in stored data 
and pertains particularly to targeted data protection. 

Stored data are subject to corruption through many mechanisms, such as user 
misuse (e.g., unintended file deletions), malicious attack (e.g. computer virus or worm 
attacks), system failures (e.g. magnetic tape damage by a tape drive or disk drive head 
crashes), and natural physical processes (e.g. cosmic ray bombardment). Various 
methods are employed to ensure data integrity, or more accurately, to control the 
probability of data corruption for storage media. These methods are typically combined 
to achieve a satisfactory level of data integrity. 

User behavior is an important component in system data integrity. Regularly 
scheduled data storage backups allow falling back to a previously known, valid data 
state when catastrophic data corruption occurs. Also, the chance of data corruption can 
be reduced by installing computer virus protection systems and keeping them up to 
date, and by replacing storage devices when they begin to demonstrate unreliability. 



10011945 




2 



Different storage media have differing physical error rates. More sensitive or 
important data may be stored on more reliable storage media. For example, data stored 
on CD-R discs are less likely to be corrupted by strong magnetic fields than are data 
stored on floppy discs. Some storage systems can recognize the deterioration of 
portions of the media and shift data automatically to more reliable locations. An 
example is a hard drive magnetic storage system that partitions the storage area into 
sectors. When the hard drive system detects that a sector is deteriorating, it marks that 
sector as "bad" and no longer uses it to store data. 

c 

Finally, the effective error rate for a particular storage medium can be reduced 
through various forms of automatic data redundancies. Redundant array of 
inexpensive disks (RAID) storage systems duplicate data across multiple discs to 
protect data against a single disc failure. Storage systems typically use error control 
codes (ECC) to encode stored data with extra bits to allow the systems to detect and 
correct for storage bit errors when reading the stored data. 

Typically, storage systems are designed such that a common storage medium 
and error correction scheme is used for all of the data stored. An example is the 
magnetic storage disk drive. During the design phase, engineers decide how much 
storage space to dedicate to redundant information (overhead), and how much to 
dedicate to data. This decision is driven by anticipated corruption rates, expected 
characteristics of corrupted data, and customer requirements. 

In certain applications (e.g., storage of compressed audio or image data), 
specific parts of the stored data are more sensitive to corruption than are other areas. 
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Sensitivity, in this case, is quantified by measuring the acceptability of reproduced 
sound or images as judged by end users. For example, a single-bit error in one place in 
the compressed image data may change the intensity of a one pixel by an amount so 
small that the change is visually imperceptible. A single-bit error in another part of the 
5 data might severely corrupt one half of the pixels in a row of data, resulting in an 
unacceptable artifact. 

The typical course of action, during design of the system, is to store enough 

1 j redundant information so at to be able to sufficiently insulate the most sensitive 

C3 
(3 

q portions of the data from errors. This "overprotects" the rest of the stored data, 



10 resulting in sub-optimal storage efficiency. Alternatively, the amount of redundant 
information might be optimized for the less sensitive portions of data, resulting in 



q greater customer dissatisfaction. 

fU 



SUMMARY OF THE INVENTION 
15 In accordance with the preferred embodiment of the present invention, data 

storage for a computing system includes a plurality of storage segments. The 
plurality of storage segments have different data protection levels. Data are stored in 
the plurality of storage segments based on data reliability requirements so that data 
with lower data reliability requirements are stored in a storage segment having a 
20 lower data protection level, and data with higher data reliability requirements are 
stored in a storage segment having a higher data protection level. 
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MPEG-1 standard specifies the coded representation of audio data and provides low bit 
rate coding for mono or stereo audio signals. It is applicable for carrying high quality 
digital audio signals associated with or without picture information on storage media or 
transmission channels with limited capacity. 

The MPEG-1 specification describes a sequence of encoding, storage and 
decoding of audio data. The encoder processes the digital audio signal and produces 
the compressed bitstream for storage. The encoder algorithm is not standardized, and 
may use various means for encoding such as estimation of the auditory masking 
threshold, quantization, and scaling. However, the encoder output must be such that a 
decoder conforming to the MPEG-1 standard will produce audio suitable for the 
intended application. 

Input audio samples are fed into the encoder. The mapping creates a filtered 
and subsampled representation of the input audio stream. The mapped samples may be 
called either subband samples (as in Layer I) or transformed subband samples (as in 
Layer III). A psychoacoustic model creates a set of data to control the quantizer and 
coding. These data are different depending on the actual coder implementation. One 
possibility is to use an estimation of the masking threshold to do this quantizer control. 
The quantizer and coding block creates a set of coding symbols from the mapped input 
samples. Again, this block can depend on the encoding system. The block 'frame 
packing* assembles the actual bitstream from the output data of the other blocks, and 
adds other information (e.g. error correction) if necessary. 
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are unpacked to recover the various pieces of information. The reconstruction block 
reconstructs the quantized version of the set of mapped samples. The inverse mapping 
transforms these mapped samples back into uniform pulse-code modulated (PCM) 
audio data. 

Annex E of the MPEG-1 specification characterizes the sensitivity of individual 
bits of the encoded data to random errors. 

The sensitivity of individual bits to random errors is given for each bit by a 
value from 0 to 5, indicating the amount of degradation resulting from one isolated 
error, as set out in Table 1 below: 

Table 1 



Level Amount of Degradation 

5 catastrophic 

4 very annoying 

3 annoying 

2 slightly annoying 

1 audible 

0 insensitive 



The values are not the results of precise measurements, rather they rely upon 
knowledge of the MPEG-1 encoding/decoding process. They assume an application- 
specific error detection scheme is not in use. 

Table 2 and Table 3 below summarize the encoded data bit sensitivities for 
MPEG-1 Part 3 compressed audio data. Some fields in the bit stream do not have a 
fixed length. All bits in these fields are rated for error sensitivity, even if not in use. 



Table 2 



MPEG-1 Part 3, Layers I and II 


Parameters 


#bit 


sensitivity 


Header Information 


all bits 


5 


Bit allocation 


all bits 


5 


Scalefactors select 


all bits 


5 


information 






Scalefactors 


5 (msb) 


4 




4 


4 




3 


4 




2 


3 




1 


2 




0 (lsb) 


1 


Subband samples (*) 


8-16 (msb) 


3 




5-7 


2 ! 




3,4 


1 




(lsb) 0-2 


0 


(*) according to the bit allocation 
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Table 2 and Table 3 above iltaarate that a data bit atteam may have varying 
5 sensitivities «o bit errors, and ft* this sensitivity information may be known a prion to 
storing the data. This sensitivity information can be provided with the data, M » a 
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storage system to achieve an optimal balance of data integrity (system quality) versus 
cost. 

In the preferred embodiments of the present invention, storage efficiency can be 
increased while still achieving system performance that meets customer needs by 
taking into account the variance of the sensitivity to bit errors of distinct portions of the 
data when these sensitivities can be characterized. 

Figure 1 shows a computer system 10 that utilizes data storage 1 1 . Data 
storage 1 1 can be internal to computer system 10 or external to computer system 10. 
Data storage 1 1 can be a single hard disk, an array of hard disks, compact disk (CD) 
storage, tape storage or any other type of data storage. 

Typically, data storage 1 1 includes redundant information used for data 
correction and detection. For example, Figure 2 shows data 20 to be stored. Data 20 
includes data portion 21 and data portion 22. Data portion 21 is highly sensitive to bit 
errors. Data portion 22 is less sensitive to bit errors. When stored within data storage 
1 1 , redundant information 26 is stored with data portion 21 . Redundant information 26 
is 50 percent of the size of data portion 21 giving significant error protection. 
Redundant information 27 is stored with data portion 22. Redundant information 27 is 
50 percent of the size of data portion 22 giving significant error protection. While data 
portion 21 "requires" this significant error protection, such a high level of error 
protection is not necessary for data portion 22. 

The scheme illustrated by Figure 2 does not take advantage of the fact that, in 
some cases, sensitivity to bit errors varies as a function of position in the sequence of 
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Figure 3 illustrates various levels of error protection being provided by varying 
the redundant information stored with a data portion. However, the level of error 
protection can be varied in a number of different ways. For example, in the preferred 
embodiments of the present invention, a storage system can implement varying levels 
of data protection through multiple storage media types, explicit data redundancy, 
and/or varying levels of error control codes (ECC). Higher data protection is achieved 
by using a more reliable storage medium, by explicitly duplicating data, and/or with 
greater ECC overhead. Lower data protection is achieved by using a less reliable 
storage medium, by not duplicating data, and/or with less ECC overhead. More 
reliable storage media areas and less reliable storage media areas may occur on 
different parts of the same physical medium. For example, on a disk drive the 
probability of error may be greater for bits stored near the perimeter of a disk. This 
results in different reliability characteristics (probability of a bit error) depending on 
storage location on the disk drive. 

In a preferred embodiment of the present invention, data storage 1 1 is 
segmented into data protection levels. The number of data protection level segments 
can be fixed or may vary, for example, according to the domain of application. 

For example, data storage 1 1 is segmented into six levels according to the 
amount of semantic degradation resulting from uncorrected data bit errors. The six 
levels are set out in Table 4 below: 
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Table 4 



Level 
Level 5 
Level 4 
Level 3 
Level 2 
Level 1 
Level 0 



Resulting Semantic Degradation 
catastrophic 
very annoying 
annoying 
slightly annoying 
barely perceptible 
imperceptible 



Assignment of data to these levels may be the result of careful perceptual 
measurements or may rely upon knowledge of the data format and perceptual 
sensitivities of the application user. 

Figure 4 illustrates storing data within data storage 1 1 . When storing data, data 
storage 1 1 requires sensitivity information along with the data to be stored. This 
information identifies how the data should be segmented and stored into the various 
storage segments to achieve an optimal balance of data integrity (e.g., system quality) 
versus cost (e.g., storage space use). This information may need to be explicitly 
provided with the data, or may be implied by the domain of application. A description 
of how the data were actually segmented is stored with data at the highest level of data 
protection. 

When retrieving the stored data, the stored segmentation information is 
retrieved to control the reassembly of the original data from the storage segments. This 
allows the storage system to reassemble data without needing external sensitivity 
information. 
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For some domains of application, the data may have such fixed structure that 
the actual data segmentation is implied and this information need not be stored with the 
data in the system. 

In Figure 4, data are stored with associated segmentation information in 
5 multiple storage segments. A data bit stream includes a field 106, a field 107, a field 
108 and a field 109. Other fields (not shown) also are typically included within the 
data bit stream. With each field within data bit stream there is associated sensitivity 
information in the form of an integer indicating a field sensitivity level (FSL). For 

p 

P example, FSL 116 indicates the sensitivity for the data within field 106. FSL 117 

m 

fjj 10 indicates the sensitivity for the data within field 107. FSL 118 indicates the sensitivity 
£ f° r the data within field 108. FSL 1 19 indicates the sensitivity for the data within field 

109. 



S 

C3 

fU A controller 140 within data storage 1 1 and/or computer system 10 is used to 

p store each field that it reads from the data bit stream into the appropriate storage 

1 5 segment within data storage 1 1 . Controller 140 logically maps a file to a set of storage 
segment addresses, one address for each storage segment. These segment addresses 
indicate the starting logical address at which data are stored for each segment for that 
file. 

Figure 4 shows six levels of storage media. Each storage medium utilizes a 
20 buffer to buffer data transferred to and from the storage media. Specifically, a level 0 
buffer 141 is used to buffer data transferred to and from level 0 storage medium 142. 
A level 1 buffer 143 is used to buffer data transferred to and from level 1 storage 
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medium 144. A level 2 buffer 145 is used to buffer data transferred to and from level 
2 storage medium 146. A level 3 buffer 147 is used to buffer data transferred to and 
from level 3 storage medium 148. A level 4 buffer 149 is used to buffer data 
transferred to and from level 4 storage medium 150. A level 5 buffer 151 is used to 
5 buffer data transferred to and from level 5 storage medium 152. 

Each buffer accumulates data bits sent to the associated storage media by 
controller 140. The buffer is flushed to the storage medium at the current segment 

M address according to methods well understood in the current art to optimize storage 

C3 

m system performance. Figure 4 shows a particularly buffering scheme. As will be 

TU 

vj 10 understood by persons of ordinary skill in the art, other buffering schemes may be 

W used. For example, a single buffer can be used for all levels of storage media. 

The storage medium for each level can be physically unique. For example, 

tQ level 4 medium 150 is a hard disk drive, while level 3 storage medium 148 is non- 

Cey. 

^ volatile solid state memory. 

15 Alternatively, all the storage media may share a same physical device, but be 

logically separated. For example, all six levels of storage media resides on a single 
disk drive, with each level's data having a different amount of error correcting 
information stored with them. This embodiment is illustrated by Figure 3 where there 
are two levels of storage on the same physical medium. One level, however, has a 
20 relatively larger number of ECC bits allocated to it. 

Before storing a data bit stream field 130 into a storage segment, controller 140 
stores a segmentation datum describing that field assignment into a highest protection 
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level storage segment (i.e., level 5 storage medium 152). The segmentation datum 
consists of a storage segment index 134 and a bit count 136. For some domains of 
application, the segmentation datum may be implied by the application. In this case it 
is unnecessary for controller 140 to store segmentation datum. 

During the process of writing the data into the storage medium, appropriate 
ECC bits are added. These bits are used when the data are retrieved in order to detect 
and correct bit errors that may have occurred during writing or storage. 

The amount of storage allocated to ECC bits (overhead) is not fixed, but is 
determined by the user requirements (sensitivity to corruption) and the probability of 
errors occurring in data stored in each media segment. Using a variable amount of 
protection allows a designer of a storage system to better optimize performance of the 
system, relative to use requirements, by more efficiently using the resources of various 
storage media and the amount of ECC overhead used for media sections of the data 
having differing sensitivities to errors. 

Figure 5 illustrates retrieving data from the storage media. Controller 140 
reconstructs the data bit stream consisting of a sequence of data bit stream fields, 
illustrated in Figure 5 by field 106, field 106, field 107, field 108 and field 109. The 
sequence of data bit stream fields are retrieved from the various levels of storage 
media. For each data bit stream field 130, controller 140 reads the segmentation datum 
from the highest protection level storage segment (level 5 storage medium 152). The 
segmentation datum consists of storage segment index 134 and bit count 136. 
Controller 140 then reads the specified number of bits from the specified segment to 
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construct the field 130. For some domains of application the segmentation datum may 
be implied by the application and the segmentation datum not actually stored in the 
storage segment. 

The buffer for each storage medium level stores data bits read from the 
5 segment's storage medium so as to be readily available for access by controller 140. 

The foregoing discussion discloses and describes merely exemplary methods 
and embodiments of the present invention. As will be understood by those familiar 

^ with the art, the invention may be embodied in other specific forms without departing 

□ 
P 

p from the spirit or essential characteristics thereof. Accordingly, the disclosure of the 

ru 

H 10 present invention is intended to be illustrative, but not limiting, of the scope of the 
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invention, which is set forth in the following claims. 



